ClawHub
Back to skill

Security audit

Warren Website Deploy(mainnet)

Security checks across malware telemetry and agentic risk

Overview

This skill does what it says: it deploys user-provided content permanently to MegaETH mainnet using the user's wallet, with real gas costs and private-key use disclosed.

Install only if you intend to let an agent publish content permanently on MegaETH mainnet and spend gas from a wallet you control. Use a dedicated low-balance deployer wallet, prefer environment or secret-manager injection over passing --private-key on the command line, review the exact content before deployment, and remember that on-chain content cannot be withdrawn or edited.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
93% confidence
Finding
The skill requires access to a highly sensitive secret (`PRIVATE_KEY`) but does not explicitly declare permissions, creating a transparency and consent failure. In an agent setting, undeclared secret access is dangerous because operators may invoke the skill without realizing it can read wallet credentials and trigger real blockchain transactions.

Tp4

High
Category
MCP Tool Poisoning
Confidence
96% confidence
Finding
The documented purpose frames the skill as a website/file deployer, but the behavior includes additional on-chain actions such as access checks, automatic NFT minting, and minting a site/MasterNFT as part of deployment. This mismatch is dangerous because users may authorize what they think is a simple content upload while the skill performs extra state-changing transactions that spend gas, alter wallet holdings, and create permanent on-chain artifacts.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.